one user's ec2api credentials stopped working [closed]

I have a user whose ec2api credentials stopped working recently. I'm told they worked about a week ago which is well after the last system level changes. System is Grizzly using sql backend for ec2 tokens (though memcache for "normal" tokens).

I can see that he can use the osapi and dashboard. I can also see that freshly downloaded ec2 credentials from the dashboard fail on a client system where my ec2api credentials and other users in the same project do work.

I removed the row with the problematic ec2_credential then created a new one with keystone ec2-credentials-create, but still seemed to have the same problem. In the interest of getting the user working again to meet a deadline I took the expedient step of deleting and recreating his user account. In retro spect I probably should have renamed the broken account to preserve state for investigation.

Unfortunately this means there's not much chance of getting any more debuging information that what I've presented here, but if anyone can deduce a possible cause from this information a a similar exerience I'd very much like to know what went wrong.

Closed for the following reason
question is not relevant or outdated by
rbowen
close date 2016-09-27 11:16:10.750902

Comments

Closing: This question relates to a version of OpenStack which has been marked End Of Life. If you are still experiencing this problem with a more recent version of OpenStack, please open a new question with updated details. Thanks!